CVE-2010-3980 Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticated users to cause a denial of service via a large numCuids v...
MediumCVSS 4.0
EPSS 0.93%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 does not limit the number of CUIDs that may be requested, which allows remote authenticated users to cause a denial of service via a large numCuids value in a GenerateCuids SOAPAction to the dswsbobje/services/biplatform URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap businessobjects | = 3.2 | No fix listed |
References
- spl0it.org exploit